Title: Secure key storage and distribution

Abstract

This disclosure describes a distributed, fault-tolerant security system that enables the secure storage and distribution of private keys. In one implementation, the security system includes a plurality of computing resources that independently store private keys provided by publishers and encrypted using a single security system public key. To protect against malicious activity, the security system private key necessary to decrypt the publication private keys is not stored at any of the computing resources. Rather portions, or shares of the security system private key are stored at each of the computing resources within the security system and multiple security systems must communicate and share partial decryptions in order to decrypt the stored private key.

Inventors:

Agrawal, Punit

Issue Date:

2015-06-02

Research Org.:

Washington State Univ., Pullman, WA (United States)

Sponsoring Org.:

USDOE

OSTI Identifier:

1183337

Patent Number(s):

9049011

Application Number:

13/967,029

Assignee:

Washington State University (Pullman, WA)

Patent Classifications (CPCs):

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION

Show more

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION

H04L9/0825 - {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
H04L9/085 - {Secret sharing or secret splitting, e.g. threshold schemes}
H04L9/0894 - {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}

Show less

DOE Contract Number:  

OE0000097

Resource Type:

Patent

Country of Publication:

United States

Language:

English

Subject:

97 MATHEMATICS AND COMPUTING; 99 GENERAL AND MISCELLANEOUS